$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yNZVU5hQzIPYe7mUdV3M_88vxOw.roa File: yNZVU5hQzIPYe7mUdV3M_88vxOw.roa (raw, json) Hash identifier: eJPJhA7BTx1nt3M+89LEg/7lMQjfvJDFxOYQ99ezWQY= Subject key identifier: C8:D6:55:53:98:50:CC:83:D8:7B:B9:94:75:5D:CC:FF:CF:2F:C4:EC Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 0F5A Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yNZVU5hQzIPYe7mUdV3M_88vxOw.roa Signing time: Tue 10 Jun 2025 11:28:32 +0000 ROA not before: Tue 10 Jun 2025 11:28:32 +0000 ROA not after: Sat 23 May 2026 09:51:00 +0000 asID: 9605 IP address blocks: 27.230.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3930 (0xf5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Jun 10 11:28:32 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=C8D655539850CC83D87BB994755DCCFFCF2FC4EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:65:5d:ab:63:36:e5:99:37:64:91:f6:27: 85:49:aa:1d:6a:b4:de:0d:bc:ee:c1:c0:f8:2f:59: 68:69:27:13:a0:4f:15:d5:78:ff:6e:95:c3:f2:d6: cf:fa:55:6b:5c:6e:c3:f1:13:d7:0f:a5:85:e4:67: 00:42:79:ef:d6:16:dc:72:62:9e:19:b9:ab:51:d5: 92:c5:11:c2:1b:6b:bc:a4:69:74:91:c8:07:43:a0: 5b:2b:af:f5:d5:dd:ff:b9:6d:80:2a:09:f0:eb:4d: ec:d5:ae:d5:ed:db:08:71:4f:01:18:7c:cc:26:f2: b2:03:28:6e:43:78:0b:59:b2:99:e1:d4:96:a4:73: ca:c4:80:41:eb:95:ca:83:f4:7e:ce:67:cb:94:17: fd:4b:23:9b:03:f8:d9:c1:90:8b:82:1b:c6:c4:60: a7:7e:49:ef:d6:a9:1c:14:27:17:b4:83:ef:fa:fd: 40:c4:99:0c:5d:2f:81:3d:25:c5:5e:db:68:09:8f: 92:32:82:45:43:58:72:89:6f:79:8e:26:75:3c:e5: 72:da:d7:96:27:c1:cd:3f:c4:c5:8c:86:a3:c4:29: ec:b0:3d:6c:9d:f6:ac:54:00:34:af:93:f6:c1:bb: 2c:d0:c4:b1:7f:29:59:87:32:13:1b:7e:a9:1c:c7: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D6:55:53:98:50:CC:83:D8:7B:B9:94:75:5D:CC:FF:CF:2F:C4:EC X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yNZVU5hQzIPYe7mUdV3M_88vxOw.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.230.224.0/19 Signature Algorithm: sha256WithRSAEncryption 8e:f8:c2:34:58:c3:7f:3b:9b:ef:c6:92:f2:66:a6:d6:35:27: 71:6d:2d:27:76:09:48:36:56:8f:59:95:7f:0b:04:d2:8b:45: f6:98:e4:47:52:6c:c4:39:9e:54:6c:f9:10:3c:24:d7:96:fa: 52:dd:93:60:72:10:19:49:a3:c3:46:4c:a7:d2:fd:3b:ab:1b: bf:03:39:95:9a:41:5b:dc:1c:58:4f:a8:b5:63:6e:13:84:59: 1e:9f:ea:8e:9a:aa:da:a8:ea:78:f9:04:74:45:db:3f:f7:e3: b3:ca:bd:dc:28:fa:3d:40:df:1e:8b:26:1a:94:b0:46:7a:0e: 20:18:0b:58:83:1b:ab:ae:82:1a:e2:3a:75:a2:79:cd:92:19: 29:34:e8:23:6a:57:ef:b7:dc:32:59:a1:94:b0:98:d3:23:6d: a0:51:b6:ed:1d:c6:e3:3e:13:a8:d7:dc:65:e6:55:92:34:29: f0:ee:b4:db:7f:53:40:c6:c3:34:b1:7d:db:22:97:11:76:7e: 4d:57:27:f9:0a:8a:c0:bf:7e:bf:f5:61:56:5e:38:1a:9a:69: 85:ff:fe:ce:d5:5e:b6:6b:c0:4d:8c:17:be:f2:4f:74:db:e3: 91:3b:fb:79:e9:b5:e3:18:9c:84:3b:55:df:f3:53:72:a7:d1: 95:e6:60:22 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICD1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNTA2MTAx MTI4MzJaFw0yNjA1MjMwOTUxMDBaMDMxMTAvBgNVBAMTKEM4RDY1NTUzOTg1MEND ODNEODdCQjk5NDc1NURDQ0ZGQ0YyRkM0RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnX2Vdq2M25Zk3ZJH2J4VJqh1qtN4NvO7BwPgvWWhpJxOgTxXV eP9ulcPy1s/6VWtcbsPxE9cPpYXkZwBCee/WFtxyYp4ZuatR1ZLFEcIba7ykaXSR yAdDoFsrr/XV3f+5bYAqCfDrTezVrtXt2whxTwEYfMwm8rIDKG5DeAtZspnh1Jak c8rEgEHrlcqD9H7OZ8uUF/1LI5sD+NnBkIuCG8bEYKd+Se/WqRwUJxe0g+/6/UDE mQxdL4E9JcVe22gJj5IygkVDWHKJb3mOJnU85XLa15Ynwc0/xMWMhqPEKeywPWyd 9qxUADSvk/bBuyzQxLF/KVmHMhMbfqkcx+83AgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUyNZVU5hQzIPYe7mUdV3M/88vxOwwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L3lOWlZVNWhReklQWWU3bVVkVjNNXzg4dnhPdy5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUb5uAwDQYJKoZIhvcNAQELBQADggEBAI74wjRYw387m+/GkvJmptY1J3Ft LSd2CUg2Vo9ZlX8LBNKLRfaY5EdSbMQ5nlRs+RA8JNeW+lLdk2ByEBlJo8NGTKfS /TurG78DOZWaQVvcHFhPqLVjbhOEWR6f6o6aqtqo6nj5BHRF2z/347PKvdwo+j1A 3x6LJhqUsEZ6DiAYC1iDG6uughriOnWiec2SGSk06CNqV++33DJZoZSwmNMjbaBR tu0dxuM+E6jX3GXmVZI0KfDutNt/U0DGwzSxfdsilxF2fk1XJ/kKisC/fr/1YVZe OBqaaYX//s7VXrZrwE2MF77yT3Tb45E7+3npteMYnIQ7Vd/zU3Kn0ZXmYCI= -----END CERTIFICATE-----Generated at Sun Jun 22 01:10:52 2025 by rpki-client